This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/53e496-0097-462a-a989-d67a61d5416d/1/jI_ogoD6SCROAfC2uF5kFRHPxqA.roa File: jI_ogoD6SCROAfC2uF5kFRHPxqA.roa (raw, json) Hash identifier: sveu3znN5dPwYIjmbfsqGbK76GO+Tvbu31qn7+7Nv0Y= Subject key identifier: 8C:8F:E8:82:80:FA:48:24:4E:01:F0:B6:B8:5E:64:15:11:CF:C6:A0 Certificate issuer: /CN=f416539e74934d23a0572f6625dbfdb54e820873 Certificate serial: 019B76EBA4E5F0477FA43B4380679C5925F2 Authority key identifier: F4:16:53:9E:74:93:4D:23:A0:57:2F:66:25:DB:FD:B5:4E:82:08:73 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9BZTnnSTTSOgVy9mJdv9tU6CCHM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/53e496-0097-462a-a989-d67a61d5416d/1/jI_ogoD6SCROAfC2uF5kFRHPxqA.roa Signing time: Thu 01 Jan 2026 00:18:33 +0000 ROA not before: Thu 01 Jan 2026 00:18:33 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 56671 IP address blocks: 46.255.149.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/53e496-0097-462a-a989-d67a61d5416d/1/9BZTnnSTTSOgVy9mJdv9tU6CCHM.crl rsync://rpki.ripe.net/repository/DEFAULT/c3/53e496-0097-462a-a989-d67a61d5416d/1/9BZTnnSTTSOgVy9mJdv9tU6CCHM.mft rsync://rpki.ripe.net/repository/DEFAULT/9BZTnnSTTSOgVy9mJdv9tU6CCHM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:76:eb:a4:e5:f0:47:7f:a4:3b:43:80:67:9c:59:25:f2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f416539e74934d23a0572f6625dbfdb54e820873 Validity Not Before: Jan 1 00:18:33 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=8c8fe88280fa48244e01f0b6b85e641511cfc6a0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:0d:5f:8a:50:1a:32:ee:af:21:4e:ee:bf:a5: f2:18:db:68:02:45:b4:9f:c0:fd:40:f1:d5:d5:b6: 47:b3:e2:33:a9:b5:7a:11:e3:48:b6:fc:82:2f:7d: 7b:43:f3:4d:c7:3e:04:6a:54:1d:11:e5:b0:73:ce: 5a:0a:89:7c:ca:9a:e9:72:3e:b2:19:1a:ea:c2:8d: 98:b2:e8:92:74:b3:e6:b5:8b:be:ca:fd:78:3a:5e: 25:b6:e7:7e:ed:35:d1:ac:e3:b8:19:ff:e9:96:0f: e6:5b:5b:9d:d0:a6:9c:a6:77:14:da:36:7d:d8:e0: 61:29:a8:75:e2:ed:13:85:0f:bc:3b:de:89:bf:90: 3a:be:7e:24:76:73:2e:40:8c:4c:2d:80:74:79:4f: 56:e6:2b:15:e7:a2:f7:7a:7c:4a:e1:7b:85:f0:3d: 91:a0:1e:b0:37:13:45:ae:e1:46:af:1b:f0:df:a3: 55:f6:c9:57:f1:69:c7:ed:0c:d0:a5:09:66:38:3e: a0:00:b8:48:3a:22:2e:45:26:d4:bb:c3:11:83:d6: 56:b0:6b:21:11:d8:0e:ee:27:ed:43:74:ff:d9:6f: 47:48:60:a3:39:d8:b1:3c:dd:14:17:60:ef:c2:f5: 5a:b8:af:b7:94:55:81:f7:8c:24:cd:8a:19:f6:27: 00:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8C:8F:E8:82:80:FA:48:24:4E:01:F0:B6:B8:5E:64:15:11:CF:C6:A0 X509v3 Authority Key Identifier: keyid:F4:16:53:9E:74:93:4D:23:A0:57:2F:66:25:DB:FD:B5:4E:82:08:73 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9BZTnnSTTSOgVy9mJdv9tU6CCHM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/53e496-0097-462a-a989-d67a61d5416d/1/jI_ogoD6SCROAfC2uF5kFRHPxqA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/53e496-0097-462a-a989-d67a61d5416d/1/9BZTnnSTTSOgVy9mJdv9tU6CCHM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 46.255.149.0/24 Signature Algorithm: sha256WithRSAEncryption 6c:02:67:a6:09:f2:46:66:40:ca:c8:ef:6a:c0:72:a0:87:86: c3:a5:64:0d:fd:8c:f9:43:22:92:4d:5b:a9:d8:87:4c:42:c7: d2:81:b5:b5:e3:39:cd:60:9b:b9:97:6c:5b:92:8d:9c:c3:79: 7f:e0:30:37:9f:e2:bf:cf:a5:d1:0e:36:9c:ed:2e:12:32:ed: d5:11:89:8c:6c:d1:60:63:ac:1f:f6:e1:13:7b:7f:fe:dc:85: a8:f2:75:2a:fb:ca:60:7f:6d:1d:26:81:f4:4f:cc:6d:6a:d5: 71:3c:3a:02:99:7a:87:e4:97:53:90:b7:21:1b:6e:68:37:ec: 34:99:b1:ce:66:48:1c:2e:3d:7d:67:dd:f3:78:4c:3f:28:22: 67:19:2b:73:67:a1:e6:d9:29:77:dc:bd:49:2c:b0:e4:21:df: b6:46:a9:69:ce:d4:ee:56:a3:19:f6:d0:49:9a:89:9e:15:d9: 31:91:32:bc:18:39:bb:3d:e7:e8:48:47:db:67:f0:a7:e6:6f: e3:64:ad:67:14:31:b8:09:5a:8e:e0:58:d6:d5:8a:b9:07:d2: a9:71:18:aa:00:f3:04:5c:1c:43:7d:aa:8b:4a:b0:7a:2e:6b: 74:c2:9c:7b:ea:2b:ab:af:05:48:29:20:f1:db:84:56:68:1b: 0a:0a:28:09 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt266Tl8Ed/pDtDgGecWSXyMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY0MTY1MzllNzQ5MzRkMjNhMDU3MmY2NjI1ZGJmZGI1NGU4 MjA4NzMwHhcNMjYwMTAxMDAxODMzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4YzhmZTg4MjgwZmE0ODI0NGUwMWYwYjZiODVlNjQxNTExY2ZjNmEwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyQ1filAaMu6vIU7uv6XyGNtoAkW0 n8D9QPHV1bZHs+IzqbV6EeNItvyCL317Q/NNxz4EalQdEeWwc85aCol8yprpcj6y GRrqwo2YsuiSdLPmtYu+yv14Ol4ltud+7TXRrOO4Gf/plg/mW1ud0KacpncU2jZ9 2OBhKah14u0ThQ+8O96Jv5A6vn4kdnMuQIxMLYB0eU9W5isV56L3enxK4XuF8D2R oB6wNxNFruFGrxvw36NV9slX8WnH7QzQpQlmOD6gALhIOiIuRSbUu8MRg9ZWsGsh EdgO7iftQ3T/2W9HSGCjOdixPN0UF2DvwvVauK+3lFWB94wkzYoZ9icADwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFIyP6IKA+kgkTgHwtrheZBURz8agMB8GA1UdIwQY MBaAFPQWU550k00joFcvZiXb/bVOgghzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOUJaVG5uU1RUU09nVnk5bUpkdjl0VTZDQ0hNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMy81M2U0OTYtMDA5Ny00NjJhLWE5ODkt ZDY3YTYxZDU0MTZkLzEvaklfb2dvRDZTQ1JPQWZDMnVGNWtGUkhQeHFBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jMy81M2U0OTYtMDA5Ny00NjJhLWE5ODktZDY3YTYxZDU0MTZk LzEvOUJaVG5uU1RUU09nVnk5bUpkdjl0VTZDQ0hNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALv+VMA0G CSqGSIb3DQEBCwUAA4IBAQBsAmemCfJGZkDKyO9qwHKgh4bDpWQN/Yz5QyKSTVup 2IdMQsfSgbW14znNYJu5l2xbko2cw3l/4DA3n+K/z6XRDjac7S4SMu3VEYmMbNFg Y6wf9uETe3/+3IWo8nUq+8pgf20dJoH0T8xtatVxPDoCmXqH5JdTkLchG25oN+w0 mbHOZkgcLj19Z93zeEw/KCJnGStzZ6Hm2Sl33L1JLLDkId+2RqlpztTuVqMZ9tBJ momeFdkxkTK8GDm7PefoSEfbZ/Cn5m/jZK1nFDG4CVqO4FjW1Yq5B9KpcRiqAPME XBxDfaqLSrB6Lmt0wpx76iurrwVIKSDx24RWaBsKCigJ -----END CERTIFICATE-----Generated at Mon Jan 26 01:01:33 2026 by rpki-client